This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft File: zE3DCP5thhIQJvl0St1A4Rc1Q94.mft (raw, json) Hash identifier: gyZp5sR1+0BuIVtZOqKLyYASv0kzbCDd9zy/ONFFj+k= Subject key identifier: 53:E2:5C:EF:D4:2E:2C:2B:D7:8D:D2:9D:DE:E0:DB:2C:72:E2:EC:86 Authority key identifier: CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE Certificate issuer: /CN=cc4dc308fe6d86121026f9744add40e1173543de Certificate serial: 019C4434B099935F6E0236C075863EE990C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft Manifest number: 1520 Signing time: Mon 09 Feb 2026 21:00:29 +0000 Manifest this update: Mon 09 Feb 2026 21:00:29 +0000 Manifest next update: Tue 10 Feb 2026 21:00:29 +0000 Files and hashes: 1: Dq-r-Yg7y34zz0AqTh3QSsCtI0M.roa (hash: BCMsstp2glA617fVzScsLywH8yZ2gjhq0JFm8FjVqK0=) 2: zE3DCP5thhIQJvl0St1A4Rc1Q94.crl (hash: BQqK8lwvtqMX6csSLWd5i8SAjdgZT1ANEe6DHaK/1Uw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:b0:99:93:5f:6e:02:36:c0:75:86:3e:e9:90:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc4dc308fe6d86121026f9744add40e1173543de Validity Not Before: Feb 9 21:00:29 2026 GMT Not After : Feb 10 21:00:29 2026 GMT Subject: CN=53e25cefd42e2c2bd78dd29ddee0db2c72e2ec86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e9:aa:23:29:e2:f2:e9:1c:20:99:14:ce:d4: e9:8f:b7:6f:d4:7f:09:ce:40:32:7b:cf:e3:ac:53: 84:74:39:f8:85:08:f0:a4:a3:37:13:9d:96:f0:9d: 06:79:0c:6c:b8:1d:45:75:a5:d6:e7:eb:d9:fd:9b: 8a:61:62:e3:f2:58:12:9a:df:7a:9f:84:62:40:52: ef:cf:6d:e2:c6:4f:0b:0a:78:50:50:45:b3:7c:40: 35:84:56:a0:92:1c:d0:84:3a:82:70:10:9e:2f:c4: fc:4e:97:25:5e:d5:b0:ac:0d:6a:1e:23:b7:37:b0: 15:ac:0c:0e:50:28:f6:49:04:19:7e:da:12:a9:ca: 89:d0:35:27:b8:97:66:0f:86:ba:1c:97:09:74:5f: 40:64:dd:6f:d3:33:93:b5:26:f0:dc:3a:10:44:0d: 66:3f:2d:20:95:03:19:99:32:25:a9:c9:fc:f4:4c: c1:0b:7e:15:44:9c:e4:85:ba:e9:12:fe:4d:9c:e2: b6:4b:1b:87:3c:d4:ee:f9:b6:4d:af:e4:59:f1:46: 3f:ac:bf:2e:99:9c:fe:02:3f:bf:0f:73:03:11:bb: 8b:e3:80:e7:e3:11:9d:76:d7:42:57:72:ef:be:ac: e4:2f:33:94:c4:f0:ee:48:6d:ba:4f:7e:d7:67:32: 16:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E2:5C:EF:D4:2E:2C:2B:D7:8D:D2:9D:DE:E0:DB:2C:72:E2:EC:86 X509v3 Authority Key Identifier: keyid:CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:71:0a:e7:f5:d7:d4:12:bd:6f:e1:09:0e:33:db:52:b3:87: 8c:6b:c6:9b:26:7a:9c:58:20:fb:d0:c6:a6:e8:dc:64:bf:4b: 42:80:62:66:c7:e6:5a:17:24:87:27:10:f1:5a:ee:19:ca:80: 40:f1:9e:a5:45:9d:a4:6d:85:dd:25:80:20:60:d9:d0:64:5c: 31:64:20:2f:5c:01:e4:8f:37:24:4d:87:bb:81:ba:35:6f:9b: f6:fd:02:a4:af:bd:20:5a:75:f8:9d:50:4c:87:d1:6e:5f:a3: 47:d2:96:9d:54:96:f9:11:fd:0d:e8:c4:53:cf:78:9b:06:00: 27:15:db:54:30:b5:2c:c2:8e:13:01:7b:a8:16:7e:9f:e8:14: 24:ff:6e:9c:d4:29:ac:af:ed:7a:2d:d7:e6:15:be:76:e9:1d: df:6d:fa:ce:81:e2:2d:fd:df:aa:dc:b5:b5:e0:39:4a:25:75: 8e:01:3e:e4:19:67:92:96:a7:74:11:01:5b:f0:4b:50:ee:4d: 7d:0c:f9:e5:a1:5c:a4:8e:93:75:4b:03:8e:32:f9:97:72:79: 8e:84:d3:09:f2:ca:e8:cd:1c:8e:d5:da:6b:0f:7a:df:d6:ba: 87:c8:cb:0e:6f:04:24:fd:79:4f:ee:a2:8b:54:3c:e3:99:cf: af:7e:06:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENLCZk19uAjbAdYY+6ZDJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNGRjMzA4ZmU2ZDg2MTIxMDI2Zjk3NDRhZGQ0MGUxMTcz NTQzZGUwHhcNMjYwMjA5MjEwMDI5WhcNMjYwMjEwMjEwMDI5WjAzMTEwLwYDVQQD Eyg1M2UyNWNlZmQ0MmUyYzJiZDc4ZGQyOWRkZWUwZGIyYzcyZTJlYzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOmqIyni8ukcIJkUztTpj7dv1H8J zkAye8/jrFOEdDn4hQjwpKM3E52W8J0GeQxsuB1FdaXW5+vZ/ZuKYWLj8lgSmt96 n4RiQFLvz23ixk8LCnhQUEWzfEA1hFagkhzQhDqCcBCeL8T8TpclXtWwrA1qHiO3 N7AVrAwOUCj2SQQZftoSqcqJ0DUnuJdmD4a6HJcJdF9AZN1v0zOTtSbw3DoQRA1m Py0glQMZmTIlqcn89EzBC34VRJzkhbrpEv5NnOK2SxuHPNTu+bZNr+RZ8UY/rL8u mZz+Aj+/D3MDEbuL44Dn4xGddtdCV3LvvqzkLzOUxPDuSG26T37XZzIWewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPiXO/ULiwr143Snd7g2yxy4uyGMB8GA1UdIwQY MBaAFMxNwwj+bYYSECb5dErdQOEXNUPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGNmYTYtYzQ0Ni00ODg2LTk2ZWQt ZDIyNmEzYjFmNDJkLzEvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGNmYTYtYzQ0Ni00ODg2LTk2ZWQtZDIyNmEzYjFmNDJk LzEvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXEK5/XX 1BK9b+EJDjPbUrOHjGvGmyZ6nFgg+9DGpujcZL9LQoBiZsfmWhckhycQ8VruGcqA QPGepUWdpG2F3SWAIGDZ0GRcMWQgL1wB5I83JE2Hu4G6NW+b9v0CpK+9IFp1+J1Q TIfRbl+jR9KWnVSW+RH9DejEU894mwYAJxXbVDC1LMKOEwF7qBZ+n+gUJP9unNQp rK/tei3X5hW+dukd3236zoHiLf3fqty1teA5SiV1jgE+5BlnkpandBEBW/BLUO5N fQz55aFcpI6TdUsDjjL5l3J5joTTCfLK6M0cjtXaaw9639a6h8jLDm8EJP15T+6i i1Q845nPr34GIA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:08 2026 by rpki-client